As a supplier, we often handle:
- drawings
- 3D models
- bills of materials
- prototypes
- designs
- tolerance specifications
- functional requirements
- project concepts
- system design
- customer-specific solutions
This information is treated as confidential and shared only with employees or partners directly involved in the task.
Confidentiality is ensured by:
- role-based access to files and data
- controlled document management
- limited sharing based on the “need-to-know” principle
- clear internal instructions
- use of secure communication channels
- storage in closed and secured systems
Documents and data are not stored in open systems or on unauthorized media.
Handling of customer data and project-specific information
Customer data is handled separately from internal data.
Project-related information includes:
- drawing documentation
- specifications
- production information
- quality requirements
- test data
- materials and batches
- logistics and delivery requirements
This information:
- is stored separately in project folders
- is shared internally only with relevant employees
- is deleted or archived in accordance with applicable rules and agreements
Any agreements on additional confidentiality (NDA) are integrated into daily operations.
Personal data – GDPR
TORA processes personal data in accordance with GDPR and applicable legislation.
Personal data we may handle can include:
- contact information
- communication data
- delivery and invoicing information
- employment data (internally)
Personal data is used only for:
- administration of cooperation
- delivery of products and services
- fulfilment of legal requirements
- internal operations
Personal data is protected through:
- access control
- logging of system access
- limited access for employees
- encrypted solutions where relevant
- storage in secure systems
- automatic deletion according to internal guidelines
TORA does not share personal data with third parties without a lawful basis or a necessary data processing agreement.
IT security and technical measures
IT security is an important part of data protection.
TORA works with:
- access control based on user level
- security updates of systems
- firewalls and network security
- limited use of external devices
- data backup
- protection against data loss
- secure file and document management systems
Only authorized employees have access to technical production material, and only employees with administrative functions have access to administrative data.
Secure communication and file exchange
Technical files and documents are exchanged through secure channels.
TORA uses:
- encrypted emails when needed
- secure platforms for file transfer
- access-protected folder areas
- internal document management systems
We do not share sensitive information via unsecured channels.
Physical security and access control
In addition to digital security, we also protect data physically.
This includes:
- access control to production and office areas
- locked archives
- restricted areas for paper-based documentation
- security procedures for visitors and partners
Physical documents are stored securely and destroyed correctly when no longer needed.
Sharing with partners
If data needs to be shared with external suppliers or partners, it happens only when:
- sharing is necessary for the task
- the partner works according to relevant security requirements
- there is a confidentiality agreement
- secure transfer methods are used
This applies, for example, to surface treatment, special processing or logistics tasks.
Deletion, archiving and data retention
Data is not stored longer than necessary.
TORA follows internal procedures for:
- deletion of digital files
- archiving as needed
- secure destruction of paper
- document handling during project periods
- after-delivery of required documentation
Retention periods are based on legal requirements, customer agreements and internal guidelines.
Responsibility and organization
Data protection and confidentiality are organizationally anchored.
TORA has:
- clear roles and responsibilities for data protection
- training of employees in relevant functions
- procedures for handling data
- internal guidelines for use of IT and equipment
- fixed processes for control and follow-up
All employees are instructed in correct behaviour, including handling of customer data and confidential information.
Confidentiality in practice – what you gain as a customer
TORA’s structure for confidentiality and data protection gives you:
- secure handling of your drawings and designs
- controlled access conditions
- protection of information about systems, installations and technical solutions
- correct processing of personal data
- secure communication in project execution
- stability and predictability in the collaboration
Confidentiality is a fixed part of the way we do business.
CONFIDENTIALITY & DATA PROTECTION
TORA works with:
- confidentiality in handling technical information
- protection of personal data according to GDPR
- secure IT systems and document management
- controlled access and sharing
- clear procedures for deletion and archiving
- protection of both digital and physical data
Confidentiality is an integrated and practical part of the production and business foundation.
